Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qJw7by4JTrc_DekZlJ1FGc6y5x4.roa
File: qJw7by4JTrc_DekZlJ1FGc6y5x4.roa (raw, json)
Hash identifier: X0NPQ6U5xHt8bU1EW88awwwq58jzcOtFP6HtpFm2Bz8=
Subject key identifier: A8:9C:3B:6F:2E:09:4E:B7:3F:0D:E9:19:94:9D:45:19:CE:B2:E7:1E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17EC1BA6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qJw7by4JTrc_DekZlJ1FGc6y5x4.roa
Signing time: Sat 01 Jan 2022 04:54:47 +0000
ROA not before: Sat 01 Jan 2022 04:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210405
IP address blocks: 185.223.164.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401349542 (0x17ec1ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a89c3b6f2e094eb73f0de919949d4519ceb2e71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:e6:61:c4:9b:91:c7:48:57:63:0d:0b:3e:
43:ef:a3:27:a2:a5:a6:d1:96:04:cf:1b:91:f1:60:
eb:7f:6c:63:d3:0d:30:00:79:60:48:a9:ae:6d:99:
98:fb:cb:cd:b3:3b:3f:55:61:b0:fa:3b:5b:f6:63:
86:ce:c0:35:31:f2:4e:58:3f:9d:73:f3:7b:e6:49:
6a:09:98:3d:d9:bf:b1:3d:2b:56:19:e9:28:82:64:
55:6b:bc:4f:55:cb:35:fd:5f:9c:a8:d8:ef:b3:a8:
95:f2:cc:f4:c3:45:25:70:de:f0:96:62:ec:9e:ba:
cb:d7:aa:b4:60:95:7e:e8:20:ca:2d:40:eb:45:2e:
32:ab:72:75:fd:71:28:56:1d:d6:36:e9:45:91:52:
ae:68:04:46:89:09:d0:b5:44:2f:9f:63:e5:0c:0d:
f0:32:72:b4:9a:c5:f5:e7:24:e6:02:7c:07:a7:0f:
5e:a5:e1:41:0f:e8:e1:fa:e4:99:42:3f:50:14:98:
94:df:39:d7:ba:e2:fc:a2:a8:26:07:9a:3a:77:d6:
7e:63:80:fb:fa:7c:aa:77:00:80:84:cb:cf:4f:f0:
cf:6b:a0:65:ec:1f:7d:a3:3b:f3:1b:22:d9:59:c2:
d9:3e:ce:54:63:02:96:6d:93:9b:e5:31:af:3a:88:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:3B:6F:2E:09:4E:B7:3F:0D:E9:19:94:9D:45:19:CE:B2:E7:1E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qJw7by4JTrc_DekZlJ1FGc6y5x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:01:74:e3:6c:13:dd:e0:71:21:28:fe:2e:45:b8:a6:71:bc:
b9:74:19:18:37:9e:da:2f:5e:a3:3a:c7:6f:24:c8:26:ed:3f:
fc:92:83:85:c4:b9:7b:b9:d7:f6:a6:40:70:82:5c:67:9c:03:
0b:06:b1:c9:52:df:5c:9d:dd:09:d6:c3:68:96:1b:86:23:d4:
f1:ab:df:0c:f3:1d:6d:85:ea:e8:0c:e4:7d:03:dd:05:57:1a:
5d:8d:ba:15:ea:37:10:d3:84:cf:2d:42:af:26:cb:9e:83:25:
c7:03:29:09:70:ee:3c:85:8d:e0:5e:b6:af:6d:66:93:9c:7d:
38:15:7d:06:b6:5e:b3:65:a2:2c:72:19:78:09:bd:03:1a:a1:
2c:49:d1:b7:dd:d4:68:2b:b3:72:ee:af:c6:1c:ac:41:40:05:
c4:7f:e7:01:20:c8:11:db:b7:52:05:63:cd:30:25:39:36:dd:
bd:7f:22:95:77:a5:30:08:4d:66:52:35:b2:0b:cf:2a:42:bc:
a4:ac:12:29:77:e7:68:37:4d:dd:ff:d3:c8:71:e5:31:ee:68:
2e:cb:f3:91:29:b4:e1:d3:b1:96:0e:c1:d5:be:82:02:90:8f:
eb:49:46:78:52:44:20:6a:b9:7e:10:c5:e2:40:83:66:35:da:
20:6d:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org